# OWASP Secure Headers Checker

> Check current website's HTTP security headers based on OWASP recommendations.

Canonical page: [https://chrome-stats.com/d/owasp-secure-headers-checker](https://chrome-stats.com/d/owasp-secure-headers-checker)

## Overview

- **ID:** `owasp-secure-headers-checker`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Removed
- **Publisher:** owasp-secure-headers
- **Daily users:** 8
- **Weekly downloads:** 2
- **Version:** 1.0
- **Last updated:** 2025-07-12
- **First published:** 2025-07-09
- **Size:** 15 KB
- **Data as of:** 2025-12-30
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/owasp-secure-headers-checker/)
- **Website:** [https://888win.us.com](https://888win.us.com/)

## Description

Analyze the current website’s HTTP response headers to check for missing or misconfigured security headers, based on OWASP best practices. Helps identify vulnerabilities related to content security, transport security, clickjacking protection, and more.

## Permissions and access

### Permissions

- `webRequest`
- `webRequestBlocking`
- `<all_urls>`
- `activeTab`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension is not longer available in the store

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [OWASP Secure Headers](https://chrome-stats.com/d/owasp-secure-headers) — 8 users
- [Security Header Grader](https://chrome-stats.com/d/security-header-grader) — 2 users
- [Security Headers Checker](https://chrome-stats.com/d/security-headers-checker) — 3 users
- [HTTP Header Security Auditor](https://chrome-stats.com/d/http-header-security-auditor) — 2 users
- [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/vaultocean-header-scanner) — 33 users, 5.00 / 5
- [OWASP Security Checker](https://chrome-stats.com/d/owasp-security-checker) — 9 users
- [Dev Headers](https://chrome-stats.com/d/dev-headers) — 1 users
- [I Hate Security Headers!](https://chrome-stats.com/d/i-hate-security-headers) — 1 users
- [Website Security Scanner](https://chrome-stats.com/d/website-security-scanner) — 4 users
- [AtosSecure](https://chrome-stats.com/d/atossecure) — 1 users
- [Clickjacking Checker](https://chrome-stats.com/d/clickjacking-checker) — 34 users, 5.00 / 5
- [OWASP Static Test](https://chrome-stats.com/d/owasp-static-test) — 3 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/owasp-secure-headers-checker)